| Package | Affected versions | Patched versions |
|---|---|---|
| shockwave player | = 1.0= 10.1.0.11= 11.0.0.456= 11.5.0.595= 11.5.0.596= 11.5.1.601= 11.5.2.602= 2.0= 3.0= 4.0= 5.0= 6.0= 8.0= 8.5.1= 9≤ 11.5.6.606 |
The implementation of pami RIFF chunk parsing in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in file-pointer calculations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir (aka Director) file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free